Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
File:                     CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json)
Hash identifier:          yGxXigSmxBY/BlzEQdRt8qY9RgUX5gIIGuD298Mt39c=
Subject key identifier:   0E:A9:C8:11:F5:85:92:0C:9F:C1:9B:79:69:1D:73:F6:36:3B:66:79
Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92
Certificate issuer:       /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292
Certificate serial:       02AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
Manifest number:          029A
Signing time:             Fri 27 Mar 2026 01:26:56 +0000
Manifest this update:     Fri 27 Mar 2026 01:26:55 +0000
Manifest next update:     Fri 03 Apr 2026 01:26:55 +0000
Files and hashes:         1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: CxgTgt9pBYuOfQfFnXYUJdSRHSOAyx1hyyoc5JfYHlA=)
                          2: 5F5A375CFF0C11F0AEE33AB880EE528E.roa (hash: uNnYabDdr+X3Z2RvWPceJhaH0aT0V7q+W0VcLO4pYtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl
                          rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292
        Validity
            Not Before: Mar 27 01:26:55 2026 GMT
            Not After : Apr  3 01:26:55 2026 GMT
        Subject: CN=69c5dce0-34d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:86:2e:fd:5a:5a:21:fc:9b:d5:4d:f9:9a:
                    dc:15:e2:7f:e7:d3:f7:5a:b7:83:b6:19:f7:5b:67:
                    c5:39:a5:8c:8d:d7:68:b1:0e:d5:51:98:47:06:a7:
                    1e:b3:4b:12:61:7a:31:ea:2b:d1:dc:7b:6d:21:ee:
                    30:d4:6f:d8:b0:81:5f:b1:87:8f:3d:2f:2d:2c:25:
                    00:ac:e2:ac:79:58:0c:8b:1e:e4:2b:9a:10:38:ed:
                    b4:d5:75:59:6f:df:fd:7a:fc:3e:04:12:0f:bd:d8:
                    0b:dc:ca:8f:e1:06:cc:b6:cf:7f:cd:fe:9b:63:52:
                    2a:86:89:09:b0:e9:f7:c1:70:c1:19:6f:80:9a:5d:
                    06:e2:09:85:d7:97:af:f3:77:a8:a2:77:f4:00:ac:
                    32:33:f4:d6:1f:2f:38:9c:09:54:01:22:e8:44:6f:
                    3c:ba:c2:02:24:17:bd:5c:67:ff:b4:3a:6f:17:dd:
                    65:50:24:b6:68:87:c8:09:10:8e:0b:fa:4b:5c:24:
                    d2:52:b4:06:78:2c:c5:bb:49:27:a3:7b:4e:c0:15:
                    a3:47:c9:10:72:bf:91:18:f5:db:a3:de:01:10:d8:
                    f1:87:7c:27:5a:3c:49:00:21:ee:db:e2:8d:ea:be:
                    39:32:67:70:61:ed:09:61:ba:83:0c:95:6a:36:f6:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:C8:11:F5:85:92:0C:9F:C1:9B:79:69:1D:73:F6:36:3B:66:79
            X509v3 Authority Key Identifier:
                keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:50:32:70:16:b4:6f:65:74:20:8e:27:90:ba:6a:53:9e:
         fb:cd:fe:5c:69:60:ca:27:bb:b3:4f:6d:11:0a:dc:96:d6:d3:
         99:a3:46:11:5c:eb:b2:43:e2:ab:0d:36:bf:c3:aa:4e:28:00:
         f2:00:56:e9:75:10:07:ca:06:4d:39:27:74:5f:9b:b3:d6:49:
         10:d7:33:f9:0f:0d:a8:d6:86:2a:08:42:c1:14:2b:dc:8b:23:
         fb:cd:16:35:04:51:b6:60:36:9d:07:8b:a0:d4:90:71:a1:b6:
         79:d6:be:16:1d:eb:3a:53:16:40:dd:c5:57:3e:fc:e0:65:db:
         16:11:23:af:1f:0a:da:a1:58:f6:46:a1:d1:8c:17:76:6d:33:
         56:92:28:74:02:c0:f8:8b:8e:21:8e:b9:41:29:68:09:44:83:
         86:47:1d:c8:08:78:25:8b:a1:0d:d5:32:e5:7d:b4:a7:3a:9d:
         16:27:ef:95:96:46:69:bb:4c:70:93:2a:be:94:f6:a7:33:bc:
         d3:b2:75:f4:49:93:c4:13:86:a9:d2:3a:f6:21:f7:59:d8:61:
         05:e7:75:b7:9d:fa:ff:b6:de:18:e6:59:ee:0d:79:75:d4:a5:
         c9:11:67:f1:07:c9:72:d3:12:54:c3:0b:15:a0:43:33:f3:23:
         5d:a8:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:56 2026 by rpki-client